Page MenuHomePhabricator
Create Task
Maniphest T413364

Requesting access to analytics-privatedata-users for kareid
Closed, ResolvedPublic
Actions

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

  • Wikimedia developer account username: kareid
  • Email address: kreid@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICvJas91rhXxHZ6IARopnBVWfWdyf9AH4xV1MiZG2Psk
  • Requested group membership: analytics-privatedata-users, deployment
  • Reason for access: I need to be able to access and update dashboards in superset and growthbooks as part of work on the Experiment Platform team; Shell access is requested for service deployments
  • Name of approving party (manager for WMF/WMDE staff): Chris Albon (calbon)
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: done
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
admin/data: Shell, deployers, analytics-privatedata-users for kareidoperations/puppetproduction+10 -6
admin: adding kareid to analytics-privatedata-users and deploymentoperations/puppetproduction+2 -2
Customize query in gerrit

Related Objects

Event Timeline

KReid-WMF created this task.Dec 22 2025, 2:56 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 22 2025, 2:56 PM
Novem_Linguae edited projects, added SRE-Access-Requests; removed LDAP-Access-Requests.Dec 22 2025, 3:24 PM
cmooney added a project: Data-Engineering.Dec 24 2025, 9:42 AM
cmooney subscribed.

Do you currently have shell access (Yes/No): Not sure - how can I check?

Looking at our existing user file I can see you are not set up for shell access yet. Which is no problem we can proceed.

If a manager can reply to approve we will get the ball rolling. It seems to me kerberos access will be needed here is that right?

JMeybohm added subscribers: calbon, JMeybohm.Jan 8 2026, 4:30 PM
In T413364#11483999, @cmooney wrote:

Do you currently have shell access (Yes/No): Not sure - how can I check?

Looking at our existing user file I can see you are not set up for shell access yet. Which is no problem we can proceed.

If a manager can reply to approve we will get the ball rolling. It seems to me kerberos access will be needed here is that right?

@calbon can you sign off on this?

Dzahn subscribed.Jan 9 2026, 7:30 AM

Since the request is described as "access and update dashboards", Hadoop is not mentioned and per:

https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access#What_access_should_I_request?
https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access#Analytics_shell_groups_explained

I don't see an indication that shell access and kerberos is needed? (common case of T405517 ?)

Dzahn added a comment.Jan 12 2026, 9:42 AM

Hi @KReid-WMF Do you only need access to dashboards (without specifically private data) and that's it? Could you take a look at https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access#What_access_should_I_request? and maybe talk to a manager to figure out which level is requested? Or is there another existing user that has the same rights you are looking for?

Dzahn assigned this task to KReid-WMF.Jan 12 2026, 9:42 AM
mpopov subscribed.Jan 12 2026, 9:17 PM
KReid-WMF added a comment.Jan 12 2026, 9:24 PM

Hi @Dzahn - the experimentation platform dashboards use private data, and as such I'll need to be part of the group to work on the dashboards. Level 1 access to the group should be sufficient.

Regarding shell access, from talking to the team, shell access is needed to deploy our service (documented in https://wikitech.wikimedia.org/wiki/Test_Kitchen/Test_Kitchen_UI/Administration#Deployment), so while I didn't initially ask for shell access, I will need it to be able to do deploys. If I should put in a separate request for that, I can do so, just let me know.

JMeybohm renamed this task from Grant Access to analytics-privatedata-users for kareid to Requesting access to analytics-privatedata-users for kareid.Jan 13 2026, 2:09 PM
JMeybohm updated the task description. (Show Details)
In T413364#11514379, @KReid-WMF wrote:

Hi @Dzahn - the experimentation platform dashboards use private data, and as such I'll need to be part of the group to work on the dashboards. Level 1 access to the group should be sufficient.

Regarding shell access, from talking to the team, shell access is needed to deploy our service (documented in https://wikitech.wikimedia.org/wiki/Test_Kitchen/Test_Kitchen_UI/Administration#Deployment), so while I didn't initially ask for shell access, I will need it to be able to do deploys. If I should put in a separate request for that, I can do so, just let me know.

We can manage the request in this ticket, no worries. But additional steps and information is required for shell access. I've updated the task description with the template for shell access requests. Please take a look at https://wikitech.wikimedia.org/wiki/Requesting_shell_access and fill out the missing fields in the task description. Thanks.

calbon added a comment.Jan 13 2026, 6:04 PM

I approve, I would Katherine to have shell access

KReid-WMF updated the task description. (Show Details)Jan 13 2026, 9:52 PM
JMeybohm removed KReid-WMF as the assignee of this task.Jan 14 2026, 1:19 PM
JMeybohm updated the task description. (Show Details)
JMeybohm updated the task description. (Show Details)Jan 14 2026, 1:27 PM
JMeybohm assigned this task to thcipriani.Jan 14 2026, 1:31 PM
JMeybohm added a subscriber: thcipriani.

@thcipriani this needs sign-off from you as the approver for the deployment group

gerritbot added a comment.Jan 14 2026, 1:35 PM

Change #1226854 had a related patch set uploaded (by JMeybohm; author: JMeybohm):

[operations/puppet@production] admin/data: Shell, deployers, analytics-privatedata-users for kareid

https://gerrit.wikimedia.org/r/1226854

gerritbot added a project: Patch-For-Review.Jan 14 2026, 1:35 PM
JMeybohm updated the task description. (Show Details)Jan 14 2026, 1:59 PM
thcipriani added a comment.Jan 15 2026, 6:59 PM
In T413364#11521115, @JMeybohm wrote:

@thcipriani this needs sign-off from you as the approver for the deployment group

Approved for deployment.

Dzahn removed thcipriani as the assignee of this task.Jan 16 2026, 9:29 AM
gerritbot added a comment.Jan 19 2026, 12:39 PM

Change #1228478 had a related patch set uploaded (by Federico Ceratto; author: Federico Ceratto):

[operations/puppet@production] admin: adding kareid to analytics-privatedata-users and deployment

https://gerrit.wikimedia.org/r/1228478

FCeratto-WMF changed the task status from Open to In Progress.Jan 19 2026, 12:40 PM
FCeratto-WMF claimed this task.
gerritbot added a comment.Jan 19 2026, 2:58 PM

Change #1228478 abandoned by Federico Ceratto:

[operations/puppet@production] admin: adding kareid to analytics-privatedata-users and deployment

Reason:

duplicate of 1226854

https://gerrit.wikimedia.org/r/1228478

gerritbot added a comment.Jan 19 2026, 4:27 PM

Change #1226854 merged by Federico Ceratto:

[operations/puppet@production] admin/data: Shell, deployers, analytics-privatedata-users for kareid

https://gerrit.wikimedia.org/r/1226854

Maintenance_bot removed a project: Patch-For-Review.Jan 19 2026, 4:30 PM
FCeratto-WMF added a comment.Jan 19 2026, 4:42 PM

@KReid-WMF access configured - can you please confirm it works so we can close the task? Thanks

KReid-WMF added a comment.Jan 21 2026, 4:40 PM

Hi - I've checked and I'm able to log in and see the test kitchen staging environment. Thanks!

FCeratto-WMF closed this task as Resolved.Jan 21 2026, 6:49 PM

Thanks, closing task.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits